Upgrade: Bump d3-color and vega-embed

Open dependabot[bot] opened this issue 3 years ago • 0 comments

Bumps d3-color to 3.1.0 and updates ancestor dependency vega-embed. These dependencies need to be updated together.

Updates d3-color from 1.4.1 to 3.1.0

Release notes

v3.1.0

Add rgb.clamp and hsl.clamp. #102

Add color.formatHex8. #103

Fix color.formatHsl to clamp values to the expected range. #83

Fix catastrophic backtracking when parsing colors. #89 #97 #99 #100 SNYK-JS-D3COLOR-1076592

v3.0.1

Make build reproducible.

v3.0.0

Adopt type: module.

This package now requires Node.js 12 or higher. For more, please read Sindre Sorhus’s FAQ.

v2.0.0

This release adopts ES2015 language features such as for-of and drops support for older browsers, including IE. If you need to support pre-ES2015 environments, you should stick with d3-color 1.x or use a transpiler.

Commits

7a1573e 3.1.0
75c19c4 update LICENSE
ef94e01 update dependencies
5e9f757 method shorthand
e4bc34e formatHex8 (#103)
ac660c6 {rgb,hsl}.clamp() (#102)
70e3a04 clamp HSL format (#101)
994d8fd avoid backtracking (#100)
7d61bbe 3.0.1
93bc4ff related d3/d33; extract copyrights from LICENSE
Additional commits viewable in compare view

Updates vega-embed from 3.14.0 to 6.21.0

Release notes

Sourced from vega-embed's releases.

v6.21.0

:tada: This release contains work from a new contributor! :tada:

Thank you, Zachary Bys (@ZacharyBys), for all your work!

🚀 Enhancement

feat: Expose expression functions #935 (@ZacharyBys @kanitw)

🐛 Bug Fix

chore: upgrade TypeScript to 4.7 #929 (@domoritz)

chore: upgrade deps #871 (@domoritz)

🔩 Dependency Updates

chore(deps-dev): bump sass from 1.52.2 to 1.52.3 #937 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.75.5 to 2.75.6 #938 (@dependabot[bot])

chore(deps-dev): bump rollup-plugin-ts from 3.0.1 to 3.0.2 #939 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.75.4 to 2.75.5 #930 (@dependabot[bot])

chore(deps-dev): bump typescript from 4.7.2 to 4.7.3 #931 (@dependabot[bot])

chore(deps-dev): bump sass from 1.52.1 to 1.52.2 #932 (@dependabot[bot])

chore(deps-dev): bump rollup-plugin-ts from 3.0.0 to 3.0.1 #933 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.74.1 to 2.75.3 #924 (@dependabot[bot])

chore(deps-dev): bump @auto-it/first-time-contributor from 10.37.0 to 10.37.1 #923 (@dependabot[bot])

chore(deps-dev): bump auto from 10.37.0 to 10.37.1 #926 (@dependabot[bot])

chore(deps-dev): bump @auto-it/conventional-commits from 10.37.0 to 10.37.1 #927 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.73.0 to 2.74.1 #920 (@dependabot[bot])

chore(deps-dev): bump browser-sync from 2.27.9 to 2.27.10 #921 (@dependabot[bot])

chore(deps-dev): bump @auto-it/conventional-commits from 10.36.5 to 10.37.0 #922 (@dependabot[bot])

chore(deps-dev): bump concurrently from 7.2.0 to 7.2.1 #915 (@dependabot[bot])

chore(deps-dev): bump sass from 1.51.0 to 1.52.1 #916 (@dependabot[bot])

chore(deps-dev): bump @babel/plugin-transform-runtime from 7.17.10 to 7.18.0 #917 (@dependabot[bot])

chore(deps-dev): bump @auto-it/first-time-contributor from 10.36.5 to 10.37.0 #918 (@dependabot[bot])

chore(deps-dev): bump auto from 10.36.5 to 10.37.0 #919 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.72.1 to 2.73.0 #914 (@dependabot[bot])

chore(deps-dev): bump concurrently from 7.1.0 to 7.2.0 #912 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.71.1 to 2.72.1 #911 (@dependabot[bot])

chore(deps-dev): bump @rollup/plugin-node-resolve from 13.2.1 to 13.3.0 #910 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.70.2 to 2.71.1 #904 (@dependabot[bot])

chore(deps-dev): bump sass from 1.50.1 to 1.51.0 #906 (@dependabot[bot])

chore(deps-dev): bump typescript from 4.6.3 to 4.6.4 #907 (@dependabot[bot])

chore(deps-dev): bump jest-canvas-mock from 2.3.1 to 2.4.0 #908 (@dependabot[bot])

chore(deps): bump ejs from 3.1.6 to 3.1.7 #909 (@dependabot[bot])

chore(deps-dev): bump @babel/plugin-transform-runtime from 7.17.0 to 7.17.10 #905 (@dependabot[bot])

chore(deps-dev): bump @rollup/plugin-commonjs from 21.1.0 to 22.0.0 #900 (@dependabot[bot])

chore(deps-dev): bump sass from 1.50.0 to 1.50.1 #901 (@dependabot[bot])

chore(deps): bump codecov/codecov-action from 3.0.0 to 3.1.0 #902 (@dependabot[bot])

chore(deps): bump tslib from 2.3.1 to 2.4.0 #903 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.70.1 to 2.70.2 #898 (@dependabot[bot])

... (truncated)

Changelog

Sourced from vega-embed's changelog.

v6.21.0 (Mon Jun 13 2022)

:tada: This release contains work from a new contributor! :tada:

Thank you, Zachary Bys (@ZacharyBys), for all your work!

🚀 Enhancement

feat: Expose expression functions #935 (@ZacharyBys @kanitw)

🐛 Bug Fix

chore: upgrade TypeScript to 4.7 #929 (@domoritz)

chore: upgrade deps #871 (@domoritz)

🔩 Dependency Updates

chore(deps-dev): bump sass from 1.52.2 to 1.52.3 #937 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.75.5 to 2.75.6 #938 (@dependabot[bot])

chore(deps-dev): bump rollup-plugin-ts from 3.0.1 to 3.0.2 #939 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.75.4 to 2.75.5 #930 (@dependabot[bot])

chore(deps-dev): bump typescript from 4.7.2 to 4.7.3 #931 (@dependabot[bot])

chore(deps-dev): bump sass from 1.52.1 to 1.52.2 #932 (@dependabot[bot])

chore(deps-dev): bump rollup-plugin-ts from 3.0.0 to 3.0.1 #933 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.74.1 to 2.75.3 #924 (@dependabot[bot])

chore(deps-dev): bump @auto-it/first-time-contributor from 10.37.0 to 10.37.1 #923 (@dependabot[bot])

chore(deps-dev): bump auto from 10.37.0 to 10.37.1 #926 (@dependabot[bot])

chore(deps-dev): bump @auto-it/conventional-commits from 10.37.0 to 10.37.1 #927 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.73.0 to 2.74.1 #920 (@dependabot[bot])

chore(deps-dev): bump browser-sync from 2.27.9 to 2.27.10 #921 (@dependabot[bot])

chore(deps-dev): bump @auto-it/conventional-commits from 10.36.5 to 10.37.0 #922 (@dependabot[bot])

chore(deps-dev): bump concurrently from 7.2.0 to 7.2.1 #915 (@dependabot[bot])

chore(deps-dev): bump sass from 1.51.0 to 1.52.1 #916 (@dependabot[bot])

chore(deps-dev): bump @babel/plugin-transform-runtime from 7.17.10 to 7.18.0 #917 (@dependabot[bot])

chore(deps-dev): bump @auto-it/first-time-contributor from 10.36.5 to 10.37.0 #918 (@dependabot[bot])

chore(deps-dev): bump auto from 10.36.5 to 10.37.0 #919 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.72.1 to 2.73.0 #914 (@dependabot[bot])

chore(deps-dev): bump concurrently from 7.1.0 to 7.2.0 #912 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.71.1 to 2.72.1 #911 (@dependabot[bot])

chore(deps-dev): bump @rollup/plugin-node-resolve from 13.2.1 to 13.3.0 #910 (@dependabot[bot])

chore(deps-dev): bump rollup from 2.70.2 to 2.71.1 #904 (@dependabot[bot])

chore(deps-dev): bump sass from 1.50.1 to 1.51.0 #906 (@dependabot[bot])

chore(deps-dev): bump typescript from 4.6.3 to 4.6.4 #907 (@dependabot[bot])

chore(deps-dev): bump jest-canvas-mock from 2.3.1 to 2.4.0 #908 (@dependabot[bot])

chore(deps): bump ejs from 3.1.6 to 3.1.7 #909 (@dependabot[bot])

chore(deps-dev): bump @babel/plugin-transform-runtime from 7.17.0 to 7.17.10 #905 (@dependabot[bot])

chore(deps-dev): bump @rollup/plugin-commonjs from 21.1.0 to 22.0.0 #900 (@dependabot[bot])

chore(deps-dev): bump sass from 1.50.0 to 1.50.1 #901 (@dependabot[bot])

chore(deps): bump codecov/codecov-action from 3.0.0 to 3.1.0 #902 (@dependabot[bot])

chore(deps): bump tslib from 2.3.1 to 2.4.0 #903 (@dependabot[bot])

... (truncated)

Commits

7e7a0df Bump version to: 6.21.0 [skip ci]
a897233 Update CHANGELOG.md [skip ci]
8ad265b Merge pull request #936 from vega/next
6509384 chore(deps-dev): bump sass from 1.52.2 to 1.52.3 (#937)
0843237 chore(deps-dev): bump rollup from 2.75.5 to 2.75.6 (#938)
4c30674 chore(deps-dev): bump rollup-plugin-ts from 3.0.1 to 3.0.2 (#939)
0e9b871 feat: Expose expression functions (#935)
787874c chore(deps-dev): bump rollup from 2.75.4 to 2.75.5 (#930)
b876959 chore(deps-dev): bump typescript from 4.7.2 to 4.7.3 (#931)
7126caf chore(deps-dev): bump sass from 1.52.1 to 1.52.2 (#932)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Oct 07 '22 17:10 dependabot[bot]